db84ab517c2143487a5181e58630d2ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db84ab517c2143487a5181e58630d2ee_JaffaCakes118
Size

661KB
MD5

db84ab517c2143487a5181e58630d2ee
SHA1

7b91b758fd548cf62bf78b5777f706101162cc9b
SHA256

0cea08237195144728f41e9dbbacf42e199b364b43209e635f49fbf640e53079
SHA512

7ed0c1a696aafc8e0993eefd923f257530a6a4f969b50a04a9307ab8212ff85e3e401e2006001fc84bc0983a488cf2b2e87a8fa680a29d94e75c8731b511e791
SSDEEP

12288:6XWw5rArh3i/5hzJTIuN7w92L7FAQB+4H6IKZDIZM:g/5eyPrFfi54HQDEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db84ab517c2143487a5181e58630d2ee_JaffaCakes118

Files

db84ab517c2143487a5181e58630d2ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ